Create Smart Group

Read this topic to learn how to create a smart group.

Before you begin

Ensure AD groups and AD attributes are defined already to associate them to a smart group.

About this task

To create a smart group, complete the following:

Procedure

  1. From the MCM Admin page expand Smart Groups and click Manage Smart Groups.
  2. On the top right corner, click Create Smart Group.
  3. On the next page, for Group Name & Description, define the following:
    • Name: It is a mandatory field. Enter a name for your smart group.
    • Group Description: Provide a meaningful description for your smart group.
    • Group Rules: The drop-down lists a maximum of 64 groups that were previously defined on the Define Groups page. Select one or more groups to define the group rules.
      • Select one or more groups from the list.
      • To add more groups to the rule, click .
      • To delete a group from the rule, click X next to a selected group.
    • Attribute Rules: You can define one or more rules with combinations of attributes, conditional operators, and values.
      To add a rule and to build Relevance expression:
      • From the Attribute Rules section, do the following:
        • Select User tab to define user attribute rules.
        • Select And/Or to mutually include or exclude user attribute rules with device attribute rules.
          Note: And/Or is enabled after you define at least one User or Device attribute rule.
        • Select Device tab to define device attribute rules.
        • Select the Attributes, conditional operator, and value.
        • To add another rule, click + Add expression.

        For example, "Department" = "Engineering" fetches all the users whose department is engineering.

    The View Client Relevance section dynamically displays the relevance statement according to your rule definition.

  4. Click Create Group to create the smart group.

Results

You have created a Smart Group that defines the applicable groups and attributes and filters the applicable devices.

Example

Example: If you have created a Smart Group named "USENGINEERS" for US Engineering users only, and add a restrictions policy named "USENGINEERRESTRICTIONS" targeted to USENGINEERS group, all endpoints that evaluate as being in the US and in the Engineering group get that specific restrictions policy.

What to do next

You can target specific devices using the created smart group. You can also associate the smart group with policy group to deploy policies to specific set of devices.